The FBI's recent operation aimed to disrupt APT28's extensive cyberespionage campaign, which had compromised over 18,000 TP-Link routers and infiltrated more than 200 organizations globally1. This campaign, attributed to Russia's Main Intelligence Directorate of the General Staff, had granted the attackers tremendous access to sensitive information. The operation, led by the FBI, involved collaboration with researchers and foreign government agencies to understand the scope of the campaign. APT28, also known as Fancy Bear, had been using the compromised routers to gain a foothold in targeted networks. The takedown of these routers is a significant blow to the group's capabilities, highlighting the shift in threat models from criminal to geopolitical. This shift requires a different approach to cybersecurity, one that takes into account the complexities of state-aligned activity. So what matters to practitioners is that this operation demonstrates the need for a proactive and collaborative approach to counter sophisticated state-sponsored threats.